Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server to request credentials they should not have access to. By default, unless otherwise set, this only affected credentials stored in the users .netrc file.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Golang-1.13 | Ubuntu | focal | * |
| Golang-1.14 | Ubuntu | focal | * |
| Golang-1.16 | Ubuntu | focal | * |
| Golang-1.18 | Ubuntu | focal | * |
| Golang-1.20 | Ubuntu | focal | * |
| Golang-1.21 | Ubuntu | focal | * |
| Golang-1.22 | Ubuntu | focal | * |
| Golang-1.23 | Ubuntu | oracular | * |